e45f4bcf646b25ed4330d4e4e55a36b0_JaffaCakes118 | Triage

Sharing

General

Target

e45f4bcf646b25ed4330d4e4e55a36b0_JaffaCakes118
Size

174KB
MD5

e45f4bcf646b25ed4330d4e4e55a36b0
SHA1

2ed8a96e7b2c144e0cc1cc6027fa273baf14fd47
SHA256

7fa244e4129a71d4cf6665252afc36e11ba708e89a7a7b40adb595edd086bdbd
SHA512

505206f2483b093ea0e0c16b3829cd41175f084b44ecf97b3cb8f6be0abdfe168737f956fae88972855869345851a917c5f3c0297d360f72b6e5843c13f832a6
SSDEEP

3072:k8SlZitzz8g4OujMoxYuOiOg3HOqZrVkKZSekQwYKR2++AMR2U7W:k8Gs9z8KmDOvgbqNYKIbRj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e45f4bcf646b25ed4330d4e4e55a36b0_JaffaCakes118

Files

e45f4bcf646b25ed4330d4e4e55a36b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a5a5e24403e890b67e2b1e695acfa66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA

kernel32

LockResource
GetCalendarInfoA
FindNextFileA
GetCommandLineW
SetLastError
GlobalFree
GetCurrentDirectoryW
MultiByteToWideChar
GetModuleHandleW
HeapAlloc
FindFirstFileW
EnumResourceNamesA
FindFirstFileA
_lread
LocalFree
GetProcessHeap
_llseek
FindFirstFileW
LoadResource
FormatMessageW
SizeofResource
RaiseException
Sleep
HeapFree
_lwrite
_lclose

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ